UPDATED
The Hacker News · · Critical severity
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React Server...
Hackaday · · Medium severity
Perhaps the most exciting news of the past few weeks in the world of hardware hacking has been the unlocking of hidden SDR functionality in the Wi-Fi radios found on Espressif ESP32 microcontrollers. They can be used as both transmit...
The Verge · · Medium severity
An Israeli ad tech firm worked with spyware companies to infect devices, including at Al Jazeera , by simply showing users an online ad, according to a joint investigation by security researchers at Citizen Lab and Confiant . It's the...
Help Net Security · · Medium severity
A Windows trojan advertised on hacking forums for as little as $150 a month promises buyers access to a victim’s webcam, microphone, keystrokes and saved passwords, and comes with a set of features made to frighten the person on the...
Help Net Security · · Medium severity
Fake CAPTCHA checks are being used to do more than hide phishing pages. Attackers are turning the familiar “prove you’re human” step into a gateway for malware downloads, malicious browser notifications, and commands that victims are...
TechRadar · · Medium severity
Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...
Malwarebytes Labs · · Medium severity
Maybe it’s a text saying your package couldn’t be delivered, with a link to reschedule. Or an email from your bank asking you to verify your account. Or perhaps it’s an invitation from someone you know to view a document.
SecurityWeek · · Medium severity
Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility. The post Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers appeared first on SecurityWeek .
TechRadar · · High severity
Rob is VPN Editor for TechRadar. Coming from a background in phones and technology, Rob has long been putting himself, and his data, online. Finding out the easy, and hard, ways to stay secure online is something that has come along the...
CSO Online Security · · Critical severity
A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers to write arbitrary files on the underlying operating system. In an advisory issued on Wednesday, the company urged customers to apply...
CERT Polska · · Medium severity
W oprogramowaniu Sparx Systems Enterprise Architect wykryto podatność typu Improper restriction of XML external entity reference (CVE-2026-88794).
The Hacker News · · Medium severity
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026. The...
AppleInsider · · Medium severity
If the first Geekbench 7 figures for the iPhone Duo are legit, the A20 Pro processor hasn't been slowed down by the foldable's design choices. It's not be a huge surprise that two iPhones with the same A20 Pro processor would show at...
Malwarebytes Labs · · Medium severity
The Federal Trade Commission (FTC) has filed a complaint accusing Digital Forensics Corporation of exploiting people already targeted by sextortionists . We have talked about sextortion and recovery scams in the past, but we never...
CSO Online Security · · Medium severity
Attackers are exploiting a newly disclosed flaw in Palo Alto Networks’ PAN-OS firewall software to run code with root privileges, and US federal agencies have been ordered to fix it and check for compromise by October 17. Palo Alto...
CIO&Leader · · Medium severity
a global technology leader that designs, develops, and supplies semiconductor and infrastructure software solutions, today introduced VMware HyperArmor, a new software solution to help further protect the VMware ESX hypervisor component...
Infosecurity Magazine · · Medium severity
CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic
SecurityWeek · · Medium severity
Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities. The post CikaBika Bot RAT Uses Discord for C&C appeared first on SecurityWeek .
TechCrunch Security · · Medium severity
The digital rights unit found evidence that dozens of devices at media organization Al Jazeera were hacked after being shown malicious online ads.
Computerworld · · Medium severity
A Delaware jury found that Arm breached its licensing agreement with Qualcomm but awarded the chipmaker just $2 in damages, leaving a potentially multibillion-dollar dispute over royalty payments unresolved. The jury ruled on October 13...
Help Net Security · · Critical severity
The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vulnerability in the...
The Register · · Medium severity
Welcome, once again, to PWNED, the weekly column where we gawk at organizations that have made serious security mistakes. Normally, we’re talking about businesses or maybe the odd school that messes up, but today we’re writing about a...
Help Net Security · · Medium severity
Microsoft uncovered a criminal marketplace supplying tools and accounts used in phishing scams worldwide. Attackers used these resources to target organizations in healthcare, financial services, wholesale distribution, and IT across...
SecurityWeek · · Medium severity
The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT. The post Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies appeared first on SecurityWeek .
AlienVault OTX · · Critical severity
Ivanti has released emergency security updates after attackers exploited a chain of three zero-day vulnerabilities in Connect Secure VPN appliances to gain root-level access without authentication. The attack began on October 3,...
AlienVault OTX · · Medium severity
A new Android banking remote access trojan named Hirudo has been identified, combining credential theft with live remote control. It is delivered through shopping and entertainment apps that act as droppers, installing the trojan as a...
iAfrica.com · · Medium severity
AI agents were used to breach an unnamed North African government technology authority, exposing more than 300,000 national identity records and data from over 500,000 companies , according to analysis published by the Institute for...
Infosecurity Magazine · · Medium severity
Microsoft and partners reveal a major Chinese-language phishing network centered around the Yam Store marketplace
SecurityWeek · · High severity
Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised. The post CenterPoint Energy Data Breach Impacts 1 Million Texans appeared first on SecurityWeek .
AlienVault OTX · · Medium severity
Resecurity identified and mapped infrastructure supporting a commercial Phishing-as-a-Service operation marketed as 'Iron Man System.' The kit is sold to criminal buyers as a self-hosted package deploying pre-built lure pages...
AlienVault OTX · · Critical severity
An investigation revealed the first confirmed incident where large language model-driven AI agents executed substantial portions of an attack. Within 24 hours, attackers exploited an exposed job-submission feature on an Apache Tomcat...
AlienVault OTX · · Medium severity
A sophisticated multi-stage network intrusion against a telecommunications organization in September 2024 exploited CVE-2024-47575 on a FortiManager appliance, exfiltrating configurations and cryptographic material for over 500 managed...
BleepingComputer · · Medium severity
Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August.
The Hacker News · · Medium severity
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in question are...
The Hacker News · · Medium severity
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic...
CERT Polska · · Medium severity
W centralach telefonicznych Slican wykryto 3 podatności różnego typu (CVE-2026-35088, CVE-2026-63314 oraz CVE-2026-63315)
· · High severity
The pathology lab disputes claims that 80 million patient records were exposed in a cyber attack, as forensic investigations continue.
SecurityWeek · · Critical severity
The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available. The post Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution appeared first on SecurityWeek .
CXO Insight Middle East · · Medium severity
New research by IBM finds that AI-related incidents are already reaching boardrooms in UAE organisations, but governance capabilities and risk accountability are under pressure as AI adoption advances. Three in four (75%) UAE executives...
The Hacker News · · Critical severity
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free